Vulnerabilities

Tracked app vulnerabilities

28,052 CVEs affect a tracked app or OS (all severities, all platforms). 374 of them are in the CISA KEV catalog, meaning exploitation is confirmed.

Matching CVEs: 28,052
Actively exploited: 374
Publication window: 1997-01-01 → 2026-10-20

All CVEs 28,052 CISA KEV 374 Public exploit 641 All severities Critical High Medium Low Hide N/A

All platforms iOS Android macOS Windows

Chronological sort: newest to oldest. Use the KEV / severity filters above to prioritize.

28,052 entries

CVE	Severity	KEV	Apps	Published
CVE-2024-9962 MEDIUM 4.3 2024-10-15 Inappropriate implementation in Permissions in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI ges…	MEDIUM 4.3	—		2024-10-15
CVE-2024-9961 HIGH 8.8 2024-10-15 Use after free in ParcelTracking in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gesture…	HIGH 8.8	—		2024-10-15
CVE-2024-9960 HIGH 7.5 2024-10-15 Use after free in Dawn in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chrom…	HIGH 7.5	—		2024-10-15
CVE-2024-9959 HIGH 8.8 2024-10-15 Use after free in DevTools in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who had compromised the renderer process to potentially exploit he…	HIGH 8.8	—		2024-10-15
CVE-2024-9958 MEDIUM 4.3 2024-10-15 Inappropriate implementation in PictureInPicture in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to perform UI spoofing via a crafted HTML pa…	MEDIUM 4.3	—		2024-10-15
CVE-2024-9957 HIGH 8.8 2024-10-15 Use after free in UI in Google Chrome on iOS prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to potenti…	HIGH 8.8	—		2024-10-15
CVE-2024-9956 HIGH 7.8 iOS 2024-10-15 Inappropriate implementation in WebAuthentication in Google Chrome on Android prior to 130.0.6723.58 allowed a local attacker to perform privilege escalation v…	HIGH 7.8	—	iOS	2024-10-15
CVE-2024-9955 HIGH 8.8 2024-10-15 Use after free in WebAuthentication in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…	HIGH 8.8	—		2024-10-15
CVE-2024-9954 HIGH 8.8 2024-10-15 Use after free in AI in Google Chrome prior to 130.0.6723.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromiu…	HIGH 8.8	—		2024-10-15
CVE-2024-44157 MEDIUM 5.5 iTunes 2024-10-11 A stack buffer overflow was addressed through improved input validation. This issue is fixed in Apple TV 1.5.0.152 for Windows, iTunes 12.13.3 for Windows. Par…	MEDIUM 5.5	—	iTunes	2024-10-11
CVE-2024-9859 HIGH 8.8 2024-10-11 Type confusion in WebAssembly in Google Chrome prior to 126.0.6478.126 allowed a remote attacker to execute arbitrary code via a crafted HTML page. (Chromium s…	HIGH 8.8	—		2024-10-11
CVE-2024-9680 CRITICAL 9.8 KEV 2024-10-09 An attacker was able to achieve code execution in the content process by exploiting a use-after-free in Animation timelines. We have had reports of this vulner…	CRITICAL 9.8	KEV		2024-10-09
CVE-2024-9603 HIGH 8.8 2024-10-08 Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromi…	HIGH 8.8	—		2024-10-08
CVE-2024-9602 HIGH 8.8 2024-10-08 Type Confusion in V8 in Google Chrome prior to 129.0.6668.100 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chro…	HIGH 8.8	—		2024-10-08
CVE-2024-43604 MEDIUM 5.7 Microsoft Outlook 2024-10-08 Outlook for Android Elevation of Privilege Vulnerability	MEDIUM 5.7	—	Microsoft Outlook	2024-10-08
CVE-2024-43504 HIGH 7.8 2024-10-08 Microsoft Excel Remote Code Execution Vulnerability	HIGH 7.8	—		2024-10-08
CVE-2024-6197 HIGH · vendor Windows 2024-10-08 Hackerone: CVE-2024-6197 Freeing stack buffer in utf8asn1str	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-45490 HIGH · vendor iOS macOS 2024-10-08 Microsoft Security Update Guide entry — NVD enrichira.	HIGH · vendor	—	iOS macOS	2024-10-08
CVE-2024-43615 HIGH · vendor Windows 2024-10-08 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43611 HIGH · vendor Windows 2024-10-08 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43608 HIGH · vendor Windows 2024-10-08 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43607 HIGH · vendor Windows 2024-10-08 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43599 HIGH · vendor Windows 2024-10-08 Remote Desktop Client Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43593 HIGH · vendor Windows 2024-10-08 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43592 HIGH · vendor Windows 2024-10-08 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43589 HIGH · vendor Windows 2024-10-08 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43585 HIGH · vendor Windows 2024-10-08 Code Integrity Guard Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43584 HIGH · vendor Windows 2024-10-08 Windows Scripting Engine Security Feature Bypass Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43583 HIGH · vendor Windows 2024-10-08 Winlogon Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43582 CRITICAL · vendor Windows 2024-10-08 Remote Desktop Protocol Server Remote Code Execution Vulnerability	CRITICAL · vendor	—	Windows	2024-10-08
CVE-2024-43581 HIGH · vendor Windows 2024-10-08 Microsoft OpenSSH for Windows Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43575 HIGH · vendor Windows 2024-10-08 Windows Hyper-V Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43574 HIGH · vendor Windows 2024-10-08 Microsoft Speech Application Programming Interface (SAPI) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43573 MEDIUM · vendor KEV Windows 2024-10-08 Windows MSHTML Platform Spoofing Vulnerability	MEDIUM · vendor	KEV	Windows	2024-10-08
CVE-2024-43572 HIGH · vendor KEV Windows 2024-10-08 Microsoft Management Console Remote Code Execution Vulnerability	HIGH · vendor	KEV	Windows	2024-10-08
CVE-2024-43571 HIGH · vendor Windows 2024-10-08 Sudo for Windows Spoofing Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43570 HIGH · vendor Windows 2024-10-08 Windows Kernel Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43567 HIGH · vendor Windows 2024-10-08 Windows Hyper-V Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43565 HIGH · vendor Windows 2024-10-08 Windows Network Address Translation (NAT) Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43564 HIGH · vendor Windows 2024-10-08 Windows Routing and Remote Access Service (RRAS) Remote Code Execution Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43563 HIGH · vendor Windows 2024-10-08 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43562 HIGH · vendor Windows 2024-10-08 Windows Network Address Translation (NAT) Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43561 HIGH · vendor Windows 2024-10-08 Windows Mobile Broadband Driver Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43560 HIGH · vendor Windows 2024-10-08 Microsoft Windows Storage Port Driver Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43559 HIGH · vendor Windows 2024-10-08 Windows Mobile Broadband Driver Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43558 HIGH · vendor Windows 2024-10-08 Windows Mobile Broadband Driver Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43557 HIGH · vendor Windows 2024-10-08 Windows Mobile Broadband Driver Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43556 HIGH · vendor Windows 2024-10-08 Windows Graphics Component Elevation of Privilege Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43555 HIGH · vendor Windows 2024-10-08 Windows Mobile Broadband Driver Denial of Service Vulnerability	HIGH · vendor	—	Windows	2024-10-08
CVE-2024-43554 HIGH · vendor Windows 2024-10-08 Windows Kernel-Mode Driver Information Disclosure Vulnerability	HIGH · vendor	—	Windows	2024-10-08

Manage your fleet with Appaloosa

Appaloosa pushes OS updates, apps and policies to your Windows, macOS, iOS and Android devices from one console.

Discover Appaloosa MDM